publish.yml

name: "Tauri - Publish"
on:
  push:
    branches:
      - release
      - refactor/production-build
jobs:
  publish-tauri:
    strategy:
      fail-fast: false
      matrix:
        include:
          - platform: "macos-latest"
            args: "--target universal-apple-darwin"
          - platform: "ubuntu-24.04"
            args: ""
          # - platform: "windows-latest"
          #   args: ""
    runs-on: ${{ matrix.platform }}
    steps:
      - uses: actions/checkout@v4
      # Setup tne node version we want
      - name: Setup node
        uses: actions/setup-node@v3
        with:
          node-version: 23
          cache: 'npm'
          cache-dependency-path: './apps/desktop-client/package-lock.json'
      - name: install Rust stable
        uses: moonrepo/setup-rust@v1
        with:
          channel: stable
      # Install macos specific targets
      - name: install intel & arm64 rust target (macos only)
        if: matrix.platform == 'macos-latest'
        run: |
          rustup target add aarch64-apple-darwin
          rustup target add x86_64-apple-darwin
      # Install tauri build deps
      - name: install tauri & plugins
        working-directory: './apps/tauri'
        run: npm install
      - name: install front-end dependencies
        working-directory: './apps/desktop-client'
        run: npm install
      # Install system dependencies
      - name: install dependencies (ubuntu only)
        if: matrix.platform == 'ubuntu-24.04'
        run: |
          sudo apt-get update
          sudo apt install \
              libwebkit2gtk-4.1-dev \
              build-essential \
              curl \
              wget \
              file \
              libxdo-dev \
              libssl-dev \
              libayatana-appindicator3-dev \
              librsvg2-dev
      # Setup arch targets - linux
      - name: setup arch target - linux
        if: ${{startsWith(matrix.platform, 'ubuntu')}}
        run: |
          echo "target_arch=$(rustc -Vv | grep host | awk '{print $2 " "}')" >> $GITHUB_ENV
          echo "target_ext=" >> $GITHUB_ENV
          echo "target_os_name=linux" >> $GITHUB_ENV
      - name: Setup arch target (windows only)
        if: ${{startsWith(matrix.platform, 'windows')}}
        run: |
          echo "target_arch=x86_64-pc-windows-msvc" >> $env:GITHUB_ENV
          echo "target_ext=.exe" >> $env:GITHUB_ENV
          echo "target_os_name=win" >> $env:GITHUB_ENV
      - name: Setup arch target (mac only)
        if: matrix.platform == 'macos-latest'
        run: |
          echo "target_os_name=mac" >> $GITHUB_ENV
      # Build stuff
      - name: build sidecar (windows/linux)
        if: ${{ matrix.platform == 'windows-latest' || startsWith(matrix.platform, 'ubuntu') }}
        run: |
          cargo build -p spyglass --verbose --release

          mkdir -p apps/tauri/binaries
          cp target/release/spyglass${{ env.target_ext }} apps/tauri/binaries/spyglass-server-${{ env.target_arch }}${{ env.target_ext }}
          cp target/release/spyglass-debug${{ env.target_ext }} apps/tauri/binaries/spyglass-debug-${{ env.target_arch }}${{ env.target_ext }}
          cp utils/${{ env.target_os_name }}/pdftotext${{ env.target_ext }} apps/tauri/binaries/pdftotext-${{ env.target_arch }}${{ env.target_ext }}
      - name: build sidecar (macos)
        if: matrix.platform == 'macos-latest'
        run: |
          cargo build -p spyglass --verbose --release --target x86_64-apple-darwin;
          cargo build -p spyglass --verbose --release --target aarch64-apple-darwin;

          # For now only build the spyglass-debug on ARM, we'll provide
          # the ARM build ourselves as part of the repo.
          cargo build -p spyglass --bin spyglass-debug --verbose --release --target x86_64-apple-darwin;
          cargo build -p spyglass --bin spyglass-debug --verbose --release --target aarch64-apple-darwin;

          # There's no build specifically for ARM macs, so lets use the same one for both.
          cp utils/mac/pdftotext apps/tauri/binaries/pdftotext-aarch64-apple-darwin;
          cp utils/mac/pdftotext apps/tauri/binaries/pdftotext-x86_64-apple-darwin;
          cp utils/mac/pdftotext apps/tauri/binaries/pdftotext-universal-apple-darwin;

          lipo -create -output apps/tauri/binaries/spyglass-server-universal-apple-darwin \
            target/x86_64-apple-darwin/release/spyglass \
            target/aarch64-apple-darwin/release/spyglass;

          lipo -create -output apps/tauri/binaries/spyglass-debug-universal-apple-darwin \
            target/x86_64-apple-darwin/release/spyglass-debug \
            target/aarch64-apple-darwin/release/spyglass-debug;

      - name: import windows certificate
        if: matrix.platform == 'windows-latest'
        env:
          WINDOWS_CERTIFICATE: ${{ secrets.WINDOWS_CERTIFICATE }}
          WINDOWS_CERTIFICATE_PASSWORD: ${{ secrets.WINDOWS_CERTIFICATE_PASSWORD }}
        run: |
          New-Item -ItemType directory -Path certificate
          Set-Content -Path certificate/tempCert.txt -Value $env:WINDOWS_CERTIFICATE
          certutil -decode certificate/tempCert.txt certificate/certificate.pfx
          Remove-Item -path certificate -include tempCert.txt
          Import-PfxCertificate -FilePath certificate/certificate.pfx -CertStoreLocation Cert:\CurrentUser\My -Password (ConvertTo-SecureString -String $env:WINDOWS_CERTIFICATE_PASSWORD -Force -AsPlainText)
      - uses: tauri-apps/tauri-action@v0
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_PRIVATE_KEY }}
          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_KEY_PASSWORD }}
          # required for macOS code signing
          ENABLE_CODE_SIGNING: ${{ secrets.APPLE_CERTIFICATE }}
          APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
          APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
          APPLE_SIGNING_IDENTITY: ${{ secrets.APPLE_SIGNING_IDENTITY }}
          APPLE_ID: ${{ secrets.APPLE_ID }}
          APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }}
        with:
          projectPath: "apps/tauri"
          # Build universal binary on macOS
          args: ${{ matrix.platform == 'macos-latest' && '--target universal-apple-darwin' || '' }} --config tauri.rel.conf.json
          # the action automatically replaces \_\_VERSION\_\_ with the app version
          tagName: v20__VERSION__
          releaseName: "Spyglass v20__VERSION__"
          releaseBody: "See the assets to download this version and install."
          # releaseDraft: true
          # prerelease: false